You can add multi-factor authentication to ProVide in three ways:
- Configure a supported MFA integration: Duo Security, ESET Secure Authentication, or Microsoft Entra ID.
- Use single sign-on (SSO) over OpenID Connect, so your identity provider enforces the MFA policy you already run.
- Build a custom authentication flow with ProVide’s scripting tools and built-in API.
The first two are configured in ProVide’s HTTPS administration interface.
Configure a supported integration #
ProVide ships with integrations for Duo Security, ESET Secure Authentication, and Microsoft Entra ID.
You enable them, and OpenID Connect SSO, from the HTTPS administration interface.
With OpenID Connect, your existing identity provider handles the logon, so the same MFA rules that protect your other systems also cover file transfer.
For the current list of options, see supported MFA and SSO options in ProVide.
Build a custom authentication flow #
If the supported integrations don’t cover your case, ProVide supports internal and external parameterized scripting and includes a built-in API. Use them to connect an external logon system or to build a flow around SMS, email, or another mechanism. To count as real two-factor authentication, your flow has to require two distinct factors, such as a password plus proof that the user holds a specific device.
When your client connects to ProVide’s administration API, ProVide can encrypt the session with the standard AUTH TLS command, the same one used by FTPS. Your client needs to support that authentication exchange.
